Retired yet joined C4C as a cyber education zealot and small business advocate (wrote a couple of books).

Taught online courses part-time for National University's Master's Degree and Bachelor's Degree in Cyber Security (CYB) Programs; including Cyber Security Toolkit Utilization, Threat Modeling & Intel, Network Security Monitoring & Incident Response, Technical Writing, and Introduction to Networking.

National University

Part-time professor

Teaching online courses for National University's Master of Science degree Program in Cyber Security & Information Assurance (MS-CSIA); courses include:

• "Cybersecurity Toolkit Utilization" (using Kali Linux)

• "Cyber Threat Mitigation, Policy, & Audit"

• "Cybersecurity Ethical Issues"

• "Network Defense & Countermeasures" (using SecurityOnion on Xubuntu Linux)

Hands-on labs for courses are conducted within a VMware environment using several operating systems on the VM instances.

Center for Internet Security

CIS Controls Ambassador

Promote and advocate the use of the CIS Controls, provide input into new products and updates to existing products, participate in meetings with CIS and other ambassadors, and provide training workshops for small businesses on how to implement CIS Control Implementation Group 1.

Past Projects

1. Managing Editor of nationwide panel (2017–2018) to develop competency-based mastery learning cybersecurity curriculum for an Information Security Foundations course, linked with NICE Cybersecurity Workforce Framework (NCWF) and NSA/DHS Centers of Excellence in Cyber Security.

2. Participated in small group of global cybersecurity experts to draft version 7 update to the CIS Controls released in March 2018; contributed to version 7.1 update (new Implementation Groups), released in April 2019; provided review comments for draft version 8 in January 2021 (v8 released in May 2021).

3. Created several Information Security document templates including:

   • Information Security Strategy

   • Information Security Program (definition)

   • Computer Security Incident Response Plan (small business version, mid-sized business version, and comprehensive version)

   • Ten Information Security policies (e.g., user administration, acceptable use, system administration security, wireless/remote access, etc.)

   • Information Security Training and Awareness Plan